$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft File: OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json) Hash identifier: M2T4mEpNuHDIKDxWpCeYWO7OvmTEXI7WTH/cG70GW5w= Subject key identifier: 69:CB:1E:DF:9E:7B:62:0F:12:B4:7C:B2:B5:02:8A:50:F8:ED:24:32 Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Certificate serial: 0396 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft Manifest number: 036B Signing time: Sun 29 Jun 2025 03:43:42 +0000 Manifest this update: Sun 29 Jun 2025 03:43:41 +0000 Manifest next update: Tue 01 Jul 2025 03:43:41 +0000 Files and hashes: 1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: p976ymqvz+6ySBjpTz2vh7XbKuHe67u/92CYH5qmYwA=) 2: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=) 3: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=) 4: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=) 5: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=) 6: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=) 7: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=) 8: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=) 9: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=) 10: 409CF10850E111F0986264E2DAE4EC9C.roa (hash: Rv8B7d0mX6Fqq83MoQ7dcQHGa++1Fp9qoSXiOUYArXg=) 11: AE6DAEF23FE311F08E1CA0BADAE4EC9C.roa (hash: NcoPOIw5nkiJxRXHYEGD+Qp0wgE7N4ijW+oi6r7fxHs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 01 Jul 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Validity Not Before: Jun 29 03:43:41 2025 GMT Not After : Jul 1 03:43:41 2025 GMT Subject: CN=6860b66e-2930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:60:c4:91:cf:68:f3:8f:80:e8:15:cf:ad: a6:37:fd:4e:f6:13:fd:7d:0c:49:bd:79:f9:77:20: 88:ee:a9:7b:5a:40:06:08:25:0a:93:b2:6f:0e:32: 5d:c7:6f:8b:a2:3c:ac:96:a4:b8:ef:25:32:40:4e: 3b:33:7e:55:f6:02:96:cf:ef:79:c2:a6:6b:91:64: 5b:33:78:ca:49:32:a9:f6:29:48:27:dc:e2:06:c4: ac:ed:ec:02:a9:cc:fe:1d:e4:7e:98:e9:00:0a:7b: a6:c8:37:af:25:47:bb:b0:d9:76:64:ab:55:fd:4f: 1e:e9:ec:9d:e2:36:38:0c:2d:24:f9:42:3e:5f:15: 3b:1b:60:42:43:cd:47:de:9f:74:c3:75:2b:11:0b: 21:dd:9b:30:0d:14:88:8e:fb:80:2d:75:e6:59:24: 9e:3f:05:59:ef:fa:04:0e:03:59:a5:ae:bf:49:2a: 18:ac:41:5b:64:d1:01:4d:4a:51:6e:66:ad:cb:30: bd:90:d6:e0:65:01:e3:ad:b3:27:a9:02:02:a9:67: 01:36:29:23:14:6e:29:74:4a:1d:96:07:c7:93:7f: d0:4d:24:46:48:3c:d7:09:84:3c:7b:2e:2f:3c:d0: f4:a1:27:5f:44:e1:06:8d:cb:23:30:ee:45:3b:9c: 65:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CB:1E:DF:9E:7B:62:0F:12:B4:7C:B2:B5:02:8A:50:F8:ED:24:32 X509v3 Authority Key Identifier: keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:35:3c:6e:32:1b:1f:82:9e:f4:fd:67:e8:58:06:29:d2:b0: 94:04:13:e4:54:36:89:39:5b:a9:c5:cf:4c:fa:3e:84:a0:3c: bd:d4:be:4e:2c:07:85:8f:87:4c:d3:9a:0c:5c:a2:01:06:fd: ab:66:68:96:6f:c5:06:21:ad:a0:eb:83:a1:fa:33:a2:29:af: fb:56:c8:d4:de:8e:dc:a2:54:27:d3:d4:60:0a:3f:9a:e0:34: ed:83:45:14:f6:5c:d8:f5:00:6a:f7:c7:92:d1:4c:3b:2f:75: 8c:eb:e6:58:46:a1:4a:d8:45:c0:ef:51:1b:f8:79:61:3c:aa: f0:e2:05:f5:35:d7:2a:b9:3d:f4:a4:0a:79:cb:a4:1d:da:72: 1f:4f:63:30:b6:ac:3b:0a:6a:cc:e2:85:38:58:f6:1d:56:04: 42:d2:13:56:52:3b:bc:59:e1:9a:e2:46:dd:36:43:94:18:3f: 43:e1:21:be:dc:fa:a6:c0:5d:db:67:19:84:12:31:42:7f:71: ce:45:dc:58:d7:6c:bf:16:7e:7d:df:5a:94:c8:3d:c5:29:d0: d6:27:b6:6c:ca:f2:ba:6b:11:2f:36:a0:ba:45:45:3a:15:91: 52:6e:4b:f5:e6:59:ec:62:49:13:92:b8:ae:c4:a2:ce:0f:de: b9:07:b1:69 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy MTlBOEM0MTIxQjAeFw0yNTA2MjkwMzQzNDFaFw0yNTA3MDEwMzQzNDFaMBgxFjAU BgNVBAMTDTY4NjBiNjZlLTI5MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC/WmDEkc9o84+A6BXPraY3/U72E/19DEm9efl3IIjuqXtaQAYIJQqTsm8O Ml3Hb4uiPKyWpLjvJTJATjszflX2ApbP73nCpmuRZFszeMpJMqn2KUgn3OIGxKzt 7AKpzP4d5H6Y6QAKe6bIN68lR7uw2XZkq1X9Tx7p7J3iNjgMLST5Qj5fFTsbYEJD zUfen3TDdSsRCyHdmzANFIiO+4AtdeZZJJ4/BVnv+gQOA1mlrr9JKhisQVtk0QFN SlFuZq3LML2Q1uBlAeOtsyepAgKpZwE2KSMUbil0Sh2WB8eTf9BNJEZIPNcJhDx7 Li880PShJ19E4QaNyyMw7kU7nGV3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUacse 3557Yg8StHyytQKKUPjtJDIwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RUY3RDAvMzZFNDBBMTZGMkZCMTFFRDgyMUI5RDgwNEFE OUU2RkMvT2xVN2J2Z0wtU0l4TDVhNDNjSHlHYWpFRWhzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALNTxuMhsfgp70/WfoWAYp0rCUBBPk VDaJOVupxc9M+j6EoDy91L5OLAeFj4dM05oMXKIBBv2rZmiWb8UGIa2g64Oh+jOi Ka/7VsjU3o7colQn09RgCj+a4DTtg0UU9lzY9QBq98eS0Uw7L3WM6+ZYRqFK2EXA 71Eb+HlhPKrw4gX1NdcquT30pAp5y6Qd2nIfT2Mwtqw7CmrM4oU4WPYdVgRC0hNW Uju8WeGa4kbdNkOUGD9D4SG+3PqmwF3bZxmEEjFCf3HORdxY12y/Fn5931qUyD3F KdDWJ7ZsyvK6axEvNqC6RUU6FZFSbkv15lnsYkkTkriuxKLOD965B7Fp -----END CERTIFICATE-----Generated at Sun Jun 29 17:44:45 2025 by rpki-client